CVE-2015-2329

Cross-site scripting (XSS) vulnerability in the WooCommerce plugin before 2.3.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via a crafted order.

• CWE-79

• https://fortiguard.com/zeroday/FG-VD-15-020Broken Link
• https://raw.githubusercontent.com/woocommerce/woocommerce/master/CHANGELOG.txtRelease Notes, Vendor Advisory
• https://fortiguard.com/zeroday/FG-VD-15-020Broken Link
• https://raw.githubusercontent.com/woocommerce/woocommerce/master/CHANGELOG.txtRelease Notes, Vendor Advisory

Published

Feb 8, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-2323FortiOS 5.0.x before 5.0.12 and 5.2.x before 5.2.4 supports …
• CVE-2015-2324Cross-site scripting (XSS) vulnerability in the filemanager …
• CVE-2015-2325The compile_branch function in PCRE before 8.37 allows conte…7.8
• CVE-2015-2326The pcre_compile2 function in PCRE before 8.37 allows contex…5.5
• CVE-2015-2327PCRE before 8.36 mishandles the /(((a\2)|(a*)\g<-1>))*/ patt…
• CVE-2015-2328PCRE before 8.36 mishandles the /((?(R)a|(?1)))+/ pattern an…
• CVE-2015-2330Late TLS certificate verification in WebKitGTK+ prior to 2.6…
• CVE-2015-2331Integer overflow in the _zip_cdir_new function in zip_dirent…
• CVE-2015-2332Cross-site scripting (XSS) vulnerability in member.php in My…
• CVE-2015-2333Cross-site scripting (XSS) vulnerability in the MyCode edito…
• CVE-2015-2334Cross-site request forgery (CSRF) vulnerability in the Admin…
• CVE-2015-2335A JSON library in MyBB (aka MyBulletinBoard) before 1.8.4 al…